In the context of Foreign Information Manipulation and Interference (FIMI), incidents refer to actions carried out by one or more threat actors with the intention of deceiving, and pursuing specific objectives. An incident is composed of a combination of observable behaviors and TTPs (Tactics, Techniques, and Procedures). Multiple related incidents can form part of a larger campaign.